Disable local login

[nicedevil007]

Heya, I just enabled OpenIDConnect with authentik and now I linked my existing accounts to my authentik account.
Is is possible to deactivate the local login that doesn't have 2FA f.e. and only allow the authentication via authentik?

[vabene1111]

You can disable registration but not login at the moment

[BobWs]

Thank for sharing! If I may ask which SSO are you using? Authentik, Authelia or Keycloak?
I tried Keycloak but it didn't work for me, I coudn't get it to work on my Synology with Nginx-Proxy-Manager...even after reading and watching a lot of tutorials:-(

I will give Authentik I try...I also started using Paperless-ngx recently, so it good to hear you have managed to get it to work with SSO/2FA I was looking for that also;-)
Thanks again!

[nicedevil007]

Give authentik a try, works like a charm for most things on my end :)

[HugoFollic]

Definitely a great feature that I would like to have. Is it complicated to implement it ?

[tristan-k]

You can disable registration but not login at the moment

How do I disable registration?

[smilerz]

https://docs.tandoor.dev/system/configuration/#enable-signup

[sargunv]

For anyone else who stumbles upon this thread from Google: I was able to hack it for now in my Nginx config:

location /api-token-auth {
  return 404;
}

location /accounts/login/ {
    return 303 /accounts/oidc/authentik/login/?process=login;
}

The first block disables the login API, and the second automatically redirects from the frontend to OIDC login. Update that latter path for your setup (change authentik to whatever your oidc provider is called).